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Abstract: 



What is the dimension of a smooth family of complex Hadamard matrices 
including the Fourier matrix? We address this problem with a power series 
expansion. Studying all dimensions up to 100 we find that the first order 
result is misleading unless the dimension is 6, or a power of a prime. In gen- 
eral the answer depends critically on the prime number decomposition of the 
dimension. Our results suggest that a general theory is possible. We discuss 
the case of dimension 12 in detail, and argue that the solution consists of 
two 13- dimensional families intersecting in a previously known 9-dimensional 
family. A precise conjecture for all dimensions equal to a prime times another 
prime squared is formulated. 
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1. Introduction 

A type of mathematical problem that arises very often is that one has a set 
of M algebraic equations in N variables, 

f m (xi, ■ ■ ■ ,xn) = , m = l,...,M . (1) 

One solution is known, and one asks whether this is an isolated solution, and 
if not one asks for the dimension of the solution space around that special 
solution. The problem to be discussed here is of that type, and our aim is 
to perform a perturbative expansion around the special solution, in order to 
learn something about the possible answers to the above questions. We will 
outline a systematic and completely general method to do so. 

The particular problem that we will study concerns complex Hadamard 
matrices. By definition a complex Hadamard matrix is a unitary N x N 
matrix all of whose entries have the same modulus. The classification of 
such matrices has a long history [1]. It has been completed for N < 5 [2], 
and much partial information is available in higher dimensions [3, 4, 5]. This 
classification problem is of interest for many reasons. In quantum theory it 
is equivalent to the problem of classifying all complementary pairs of bases 
[6] — now known as Mutually Unbiased Bases [7] — and it can be used to give 
quantitative content to Bohr's principle of complementarity [8] . It also forms 
part of the problem of classifying unitary operator bases [9], which is of 
importance in quantum information theory, and it arises in operator algebra 
[10], quantum groups [11], and elsewhere. 

A complex Hadamard matrix that exists for any iV is the Fourier matrix, 
whose entries are 

Fij = -= 0<i,j<N-l, u = e~ . (2) 
V -/V 

This is the special solution that we are going to expand around. Although 
we will proceed somewhat differently, in principle one can proceed with this 
problem by modifying all the matrix elements according to 

^ Jijni ; ( 3 ) 

expanding the phase factors in powers of r^, and then solving the unitarity 
equations order by order in r^. To first order in the perturbation this has 
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been done by Tadej and Zyczkowski [12], who found that the number of free 
parameters that survive to first order is 



D 1 = J2scd(n,N) , 



(4) 



n=0 



where gcd denotes the greatest common divisor. If iV is prime this means 
that the number of free parameters is 2N — 1. This is the number one would 
naively expect by counting parameters, but for non-prime values of N the 
number D\ is larger than that. 

We can multiply the rows and columns of a complex Hadamard matrix 
with 2N — 1 overall phase factors, while still preserving the Hadamard prop- 
erty. Hence 2N — 1 parameters are trivial, and it is customary to remove 
them by presenting complex Hadamard matrices in dephased form, such that 
the first row and the first column have real and positive entries. The number 



is called the linear defect of the Fourier matrix [3], and gives an upper bound 
on the dimension of any smooth family of dephased complex Hadamard ma- 
trices passing through the Fourier matrix. If N = p k is a prime power the 
situation is very satisfactory since explicit solutions for dephased Hadamard 
matrices with di free parameters are known. These solutions are of an es- 
pecially simple kind, known as afline families [3]. We are concerned with 
other values of N, for which very little is known. An exception is the special 
case N = 6, for which di — 4, a 3-dimensional family has been constructed 
explicitly [13], and a 4-dimensional family has been shown to exist [14, 5]. 
What is missing so far is a proof that the 4-dimensional family includes the 
Fourier matrix, and that it is smooth there. Numerical arguments for the 
truth of this have been presented [15], and we will confirm this conclusion in 
a perturbative expansion that we carried to order 100. 

But it appears that the first order result is misleading in all other cases. 
Indeed for all values of N less than 101 and not equal to 6 or to a prime power, 
we will prove that the dimension of the largest smooth family is strictly less 
than the linear defect. 

What we really want to know is by how much the dimension of the solution 



N-l 



d 1 = D 1 - (2N - 1) = ^(gcd(n, N) - 1) 



(5) 



71=1 
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space differs from d\. For N = 12, which is of some special interest [3], we 
find that the largest smooth family has dimension 13, while the linear defect 
is 17 and the largest explicitly known families have dimension 9. The solution 
in fact consists of two 13-dimensional families intersecting in a 9-dimensional 
affine family. Our evidence suggests that the situation is similar whenever 
N is a product of two primes, one of them occurring twice, and we are able 
to formulate an appealing conjecture of what the final picture is likely to be 
in this case. 

While these results fall short of providing a general solution to our prob- 
lem they do make us feel that a general solution of a reasonably simple sort 
does exist. 

Most of the paper is devoted to explaining the procedure that leads to the 
results we have. In section 2 we give a bird's eyes view of the general method. 
A linear system of equations has to be solved at each order of the expansion, 
but the problem is non-trivial because it can happen that a solution exists 
only if non-linear consistency conditions are imposed on the lower order so- 
lutions. In section 3 we begin our discussion of complex Hadamard matrices, 
and set up the equations that are to be solved perturbatively. In sections 4, 
5, and 6 we describe how the general method applies to the problem at hand. 
In section 7 we investigate all N < 100, and find out when the dimension of 
any smooth family is indeed less than d\. In section 8 we discuss the case 
of N = 12 in full detail, and in section 9 we discuss the cases N = 18, 20, 
ending with a conjecture for all N = p\p\, where pi,p? are prime numbers. 

The calculations were partly numerical, partly symbolical, and were per- 
formed using Mathematica. We warn the reader at the outset that our results 
rely on a considerable amount of calculational detail. Depending on inter- 
ests the reader may therefore want to just glance at section 2, and then go 
directly to section 10 where our conclusions are summarised (and where we 
offer some speculations concerning the final picture). 

In Appendix A we define the notion of affine families, and give more 
background information concerning complex Hadamard matrices. For ease 
of expression we refer to such matrices simply as "Hadamard matrices" from 
now on, and when we talk of "the dimension of the solution space" we refer 
to the dimension d\ of the set of dephased Hadamard matrices. Appendix B 
gives an explicit construction of affine families for N equal to a prime power. 
Appendix C contains an exact second order calculation, valid for all N. 



4 



2. The method 



Let us return to eqs. (1). It is assumed that we know one solution for the N 
variables. By shifting the variables if necessary, we can arrange that x n = is 
a solution of the equations. When we expand the system around this solution 
the equations take the form 

fm A m - n x n -\- A m - nin2 x ni x n2 -\- . (6) 

Summation over repeated indices is understood. Assume that the solution 
x n = belongs to a family of solutions x n (ri, . . . ,r D ) with D unknown 
parameters. If the variables are expanded in these parameters we will obtain 
an expansion of the form 

Xn = x W +x M + ... . (7) 

We do not explicitly write out the dependence on the parameters. Inserting 
this into eqs. (6) we obtain 

f - A r (1) 4- A r (2) 4- A r^M 1 ) _i — n (R) 

This equation is now to be solved order by order in the hidden parameters. 
Thus we obtain 

A m - n x^ = (9) 

A x (2) _A 3,(1)3,(1) (IQ\ 



A _(3) = _ A I (1) (2) , x (2) x (i)\ _ j{ X (1) X {1) X {1) ill) 

and so on to higher orders. At each order then we are faced with a linear 
system; homogeneous to first order and heterogeneous to the higher orders. 
At each order higher than the first this linear system may or may not- 
depending on the form of the original equations — impose restrictions on the 
solutions obtained in lower orders. 

To deal with these linear systems we introduce a pseudo-inverse of the 
M x N matrix A m . n . This is a matrix A obeying AAA = A. For this 
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general discussion it is natural to choose the Moore-Penrose inverse for this 
purpose, since — due to some extra conditions — it is uniquely defined and 
easily computed [16]. The relevant theorem is that the linear system 

AX = B (12) 

admits a solution if and only if 

(1-AA)B = 0. (13) 
When this consistency condition is obeyed the general solution is 

X = AB + (1- AA)Y , (14) 

where the N components of the column vector Y are arbitrary. The matrix 
1 — AA typically has rank less than N, so the number of free parameters in 
the homogeneous solution is typically less than N. 

Let us assume that the first order equations admit the homogeneous so- 
lution 

x« = fc« . (15) 

If the consistency conditions are obeyed to all orders there is little to add, 
except that the homogeneous part of the solution can be set to zero at each 
order higher than the first since any such solution can be absorbed into the 
first order homogeneous solution. 

The more interesting case is when the consistency conditions break down 
at some order. Let us assume that the lowest order where this happens is 
s > 1. Then we are faced with a set of homogeneous polynomial equations 
of order s in the variables hi}\ We cannot say by how much the dimension 
of the solution space drops until these equations have been solved. Once 
this has been done the calculation can proceed, and to higher orders we will 
obtain linear equations for the higher order homogeneous solutions, fixing 
the variables corresponding to the ones that were fixed at previous orders. 
These linear systems come with consistency conditions of their own. We have 
not investigated in any systematic manner what happens if these conditions 
break down at some higher order-alt hough this does happen in some of the 
concrete cases that we study below. 
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3. The Hadamard equations 

The equations ensuring that a matrix is a Hadamard matrix define an al- 
gebraic variety of some sort [18]. Since our aim is to solve these equations 
order by order in an expansion around the Fourier matrix F we begin by 
performing a discrete Fourier transformation of all our matrices, that is 

H ->■ M = HF^ . (16) 

This means that the Fourier matrix itself is represented by the unit matrix. 
We prefer to represent the Fourier matrix with the zero matrix, so we shift 
the matrix to 

X = l-M. (17) 

We must now formulate the condition that if be a Hadamard matrix as a set 
of equations for the matrix X. In order to be able to address the equations 
in an efficient way we aim for a subset of equations in which the complex 
conjugates of the matrix elements do not occur. 

For this purpose we introduce the permutation matrix P with matrix 
elements 

Pij — $i+l,j ■ (18) 

This matrix generates the cyclic group of order N, and has the columns of 
the Fourier matrix as its eigenvectors. We denote the commutator of two 
matrices by [A, B], and the diagonal elements of a matrix by diag(A). 

Theorem 1 : H is a Hadamard matrix if and only if M = HF^ obeys 

MM^ = 1 (19) 

diag(MP n M f ) = , n ^ , (20) 

where P is the permutation matrix defined above. For the matrix X = 1 — M 
these equations read 

X + X f = XX f (21) 
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diag ar,I]FU0, n^O, (22) 
\p=o / 

at least in a neighbourhood of the Fourier matrix. 
Proof : Direct calculation shows that 

(MP n M% = J^^l^jl 2 , (23) 

3 

and elementary properties of the discrete Fourier transform now establish 
that eq. (20) is necessary and sufficient, given that M is unitary. Since 
unitarity is imposed separately we may replace the matrix by the matrix 
M _1 in eq. (20). Expanding M -1 = (1 — X) -1 in a geometric series and 
using the property that 

diag [P n Y.xA = diag ( P n jr X p+1 ) (24) 

V P=0 / \ p=0 / 

we arrive at eq. (22). The unitarity condition on M is clearly equivalent to 
eq. (21). □ 

The plan now is to solve eq. (22) first, using complex entries with no 
complex conjugates appearing, and to impose the unitarity condition at the 
end. To follow the letter of the method sketched in section 2 we should 
reshape the matrix X into a vector, but we will not actually do so since it 
will turn out that we can solve directly for the matrix X. 

Following the method outlined in section 2 the first step is to expand X 
order by order in the unknown parameters, 

oo 

X = J2 x(s) - ( 25 ) 

s=l 

Inserting this into eq. (22), which itself contains an infinite sum to be ex- 
panded, we find that the equations at each order s form the inhomogeneous 
linear system 

diag ([P n , X (s) ] + B {s ' n) ) = , (26) 
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where p( s ' n ) can be computed in terms of quantities determined at lower 
orders. The first few orders are 

diag([P n ,X«]) =0 (27) 



diag ([P n , X^\ + [P n , X«]X«) = (28) 

diag ([P n , X^} + [P n , X^]X^ + [P n , X^](X^ + X«X«)) = . (29) 

At each order s this is a linear inhomogeneous equation in the unknown X^ s \ 
We record that 

s-l 

B (s,n) = [P n , X (so) ]X (si) . . . X^ . (30) 

p=l Si>l 

soH hs P =s 

We will need this result in the proof of Theorem 5 below. 

We end this section with two comments. The first concerns transposition 
of Hadamard matrices: If if is a Hadamard matrix so is its transpose H T , 
a fact that will play a role when we discuss explicit solutions later on. It is 
easy to show that 

H — >■ H T X ->■ FX T F f . (31) 

Hence transposition is slightly obscured by the discrete Fourier transform. 

The second comment concerns dephasing: We have already observed that 
any Hadamard matrix admits 2N — 1 free parameters that are in a sense 
trivial, and that these trivial parameters can be removed by insisting that 
the first row and the first column of the matrix has entries equal to 1/ \/N 
only. If we dephase the first row of the matrix H we will obtain a matrix X 
whose first row contains zero entries only. If we also dephase the first column 
of H we find that X takes the form 
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X 










X 



N-l 

j'=i 



. 



(32) 



In our calculations we did not impose this condition, but we will state our 
results in terms of the dimension of the set of dephased matrices. 



4. The homogeneous system 

We begin by solving the linear first order system (n ^ 0) 

diag[P", X™] = & X^ t - X^_ n = . (33) 

We observe that there is no condition on the diagonal elements of X, and that 
the equalities that do arise connect only elements on some given displaced 
diagonal. On the nth displaced diagonal we obtain the string of equalities 

Xi t i- n = Xi +rl; i = Xi + 2n,i+n = ■ ■ ■ ■ (34) 

It pays to think of the matrix as built up from displaced diagonals rather 
than columns, so we introduce the parametrisation 

X-ij — ■ (35) 

Our string of equalities becomes 

Now let the greatest common divisor of n and N be denoted by g, so that 

N = gr , n = gs . (37) 

Then, since the matrix indices are defined modulo N, the string of equalities 
ends with an identity after r steps, 
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%/* 

Figure 1: The proof of theorem 2; one should think of a matrix in terms of its 
diagonals, not in terms of its rows or columns. 

This means that the nth displaced diagonal consists of g sets of r identical 
elements. Recalling that the elements on the main diagonal are unrestricted 
it follows that the number of free parameters at first order is 

N-1 N-1 

gcd(n, N) = N+J2 £ cd ( n > N ) • ( 39 ) 

n=0 n=l 

This agrees with the result (4) due to Tadej and Zyczkowski [12], except 
that at this stage our parameters are complex since we have not yet imposed 
condition (21). To linear order condition (21) evidently means that we end 
up with exactly this number of real parameters, so the agreement is in fact 
complete. If N = p is a prime number we obtain N—l independent equalities, 
which means that all elements on each displaced diagonal are set equal. In 
this case then there are exactly 2N — 1 free parameters in the solution, which 
means that the dephased Fourier matrix is isolated. 
In effect we have proved 

Theorem 2 : At any order, the homogeneous solution to our linear system can 
be written as 

x (s) = (.) 

i,j i mod gcd(j—i,N),j—i mod N 
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(40) 



An illustration of the proof is given in Fig. 1. If N = p is a prime number 
X is a circulant matrix, except that its main diagonal is unrestricted. Its 
dephased form is zero. A more interesting example is that of N — 6, for 
which the first order solution is 



(41) 



/ ^0,0 ^0,1 x 0,2 x 0,3 x 0,4 x 0,5 \ 

x 0,5 x l,0 x 0,l x l,2 x l,3 x l,4 

_ x 0,4 x 0,5 x 2,0 x 0,l x 0,2 x 2,3 

x 0,3 x l,4 x 0,5 x 3,0 x 0,l x l,2 

x 0,2 x l,3 x 0,4 x 0,5 x 4,0 x 0,l 

\ x 0,l x l,2 x 2,3 x l,4 x 0,5 x 5,0 / 

When we remove the trivial parameters by dephasing the Hadamard matrix 
this is 



( o 










d\ 


x 1A 

x l,3 
x l,2 





d 2 



x 2,3 





371,2 



d3 


XlA 





x l,3 




d 4 






x l,4 
x 2,3 
x l,2 



d 5 



\ 



(42) 



/ 



Now the diagonal elements di are dependent parameters since dephasing the 
Hadamard matrix means that the column sums of X vanish, so the number 
of free parameters equals 4. The affine Fourier family (see Appendix A) 
corresponds to Xi j3 = x 2j 3 = 0, and its transpose to x 12 = x 1A = 0; to see 
what eq. (31) implies for X when H is transposed it is helpful to begin 
with the observation that circulant matrices are diagonalised by the Fourier 
matrix. 



5. The heterogeneous systems 

The question now — if N is a composite number — is whether there are non- 
trivial consistency conditions on the linear systems that appear when we 
insert the expansion (25) in eq. (22). If so the first order result is misleading, 
and the true dimension of the solution space is lower than the linear result 
suggests it should be. 
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The equations that we are faced with take the form (26). Our aim is to 
bring their solution to a form precise enough to enable us to implement it in 
Mathematica. This is achieved in the following two theorems. 

Theorem 3 : The general solution to the heterogeneous linear system (26) is 

m[i,j,N]-l 

x i mod gcd(j-i,N),j-i ^ i+q(i-j),i+q(i-j) ' ^ ' 

q=0 

subject to the consistency conditions 

AT/gcd(n,AT)-l 

EB {s ' n) - (44) 

D i+q gcd(n,N),i+q gcd(n,AT) U ' 

where n G {1, . . . , N — 1}, i G {0, . . . , gcd(n, N) — 1} in the consistency 
conditions, the Xij-i are free parameters, and m = m[i,j, N] is given by 

i mod gcd(i - j, N) - i ( i-j V 1 N 

m — TT- ~^T^ TT- m °d TT- : — ttt , (45) 

gcd(t-j,N) \gcd(t-j,N)J gcd(t - j, N) 

where the inverse is the modular multiplicative inverse. 

Proof : Using explicit matrix indices eq. (26) becomes 

4-n = *£m + B ^ ■ (46) 
Setting n = i — j we find by iterating in m steps that 

m— 1 

v( s ) , f)(s,i-j) (a>7\ 

^i+m(i-j),j+m(i-j) ~T~ i+q(i-j),i+q(i-j) ' ^ > 

q=0 

When 

kN 

mii - j) = mod N <^> m = — — , k G Z (48) 

V ' gcd{t -j,N) V ; 

we obtain a consistency condition which — after a slight reordering of the 
sum — is exactly eq. (44). 
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Now we must find a particular solution of the heterogeneous system. We 
begin by choosing all matrix elements corresponding to independent param- 
eters in the homogeneous solution to zero, beginning with all elements in the 
upmost row and continuing downwards until the independent elements are 
exhausted. For this particular solution 

% mod gcd(i - j, N) = % =4> = . (49) 

Coming back to eq. (47), which relates elements along the (i — j)th diagonal 
in steps of gcd(i — j, N), the particular solution is fully determined once we 
find (for each i,j, N) an integer m such that 

i + m{i — j) = i + m(i — j) mod gcd(i — j, N) = i mod gcd(i — j, N) , (50) 
where the arithmetic is always modulo N. Thus we write 

f i-j i mod gcd(i - j, N) - i \ N 

\ m gcd(* - j, N) ~ gcd(* - j, N) j m ° gcd(* - j, N) [ * } 

The modular multiplicative inverse used in eq. (45) exists since the numbers 
m/gcd(i — j, N) and N/gcd(i — j, N) are coprime. Using this value of m in 
eq. (47) gives the particular solution, and we arrive at the general solution 
(43) by adding the solution of the homogeneous equations. □ 

To illustrate the proof we give the particular solution for N = 6: 



( 

















\ 


V 4 B {1) 


















V 1 B {2) 


v-3 R (l) 
Z^O -°5-5g 





V 1 R (5) 

Z^O 


-°2 









Z^O "5-2,} 


ZwO ^5-59 





Z^O ^1-9 






Z^O D 2-2q 






Z^O ^5-5(3 





v-3 R (5) 
Z^O ^l-g 




V 4 „(5) 
\ ZvO °l-q 


ZvO -°3-2q 






B « 





/ 



(52) 
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where (for typographical reasons) we let B^f 1 be denoted by B\ . 

To make use of theorem 3 we must compute the inhomogeneous term 
B^- n \ This is achieved in the next theorem. 



Theorem 4 : The inhomogeneous part B^ s ' n ^ 



is given iteratively by 



(53) 



s-1 




(54) 



r=l 



The proof is straightforward. 

It is hard to continue the discussion with any generality, but we have 
been able to prove that the consistency conditions arising at second order, 
eqs. (28), are identically zero for all N. We give a brief sketch of a proof 
in Appendix C. At third order the consistency conditions do break down for 
some values of N, as will be discussed in section 7. 

6. The unitarity equations 

We must now impose the unitarity condition (21) on the solutions obtained 
in section 5. When X is expanded in a power series the unitarity condition 
at order s reads 



s-1 




(55) 



r=l 



We insert the solution 





(57) 



where 
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s-l 



(58) 



r=l 



Note that this depends on the solution only to orders less than s. 



Theorem 5 : Unitarity is achieved by 



Re 



x 



Re 



is) 

i mod N/2,N/2 



X 



(s) 



= -F 
2 



If 



2 i,i+N/2 



if N is even 



(59) 
(60) 



^ mod gcd(n,N),-n = F ij ~ ^ mod gcd(n,7V),n forO<n<N/2 . (61) 



Proof : Most of the calculation is already done, but in eqs. (60-61) some 
equations are repeated as i runs through its N values, and we must prove 
consistency, namely that 

diag[P n , P (s) ] = . (62) 
Using the fact that diag[P n , H^] = — p( s ' n ) a calculation shows that 



s-l 



diag[P n , P (s) ] = diag Y^[ pn , xis ~ r) \ xir)1 + B(s ' n) 



,r=l 



s-l 



-diag ^[p-",X (s - r) ]X (r)t + B {s '~ n) 



,r=l 



Next we show directly from eq. (55) that 



p=l Si>l 

soH hs p = 



(63) 



(64) 
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Using this result, and using eq. (30) to substitute for B( s ' n \ we see that the 
right hand side of eq. (63) vanishes, as was to be shown. □ 



We illustrate this by imposing unitarity on the first order result for N = 6 
given in eq. (41). It now reads 



( 


1/0,0 


Z0,1 


^0,2 


2/0,3 


-^0,2 


— ^0,1 


\ 




-^0,1 


2/1,0 


&0,1 


^1,2 


2/1,3 


-^1,2 






— ^0,2 


— ^0,1 


2/2,0 


^0,1 


^0,2 


2/2,3 






2/0,3 


-^1,2 


— ^0,1 


2/3,0 


#0,1 


^1,2 






3^0,2 


2/1,3 


-^0,2 


-^o,i 


2/4,0 


£o,i 




V 




X\,2 


2/2,3 


-^1,2 


-^0,1 


2/5,0 


/ 



(65) 



The matrix elements denoted y^j are purely imaginary. The others are com- 
plex and related in pairs by complex conjugation. 

The important point is that the unitarity condition simply cuts the num- 
ber of free parameters in half; in other words if there were d complex param- 
eters to start with we end up with d real parameters. 



7. When do the consistency conditions break down? 

As was mentioned at the end of section 5 the consistency conditions always 
hold to second order. For third order and higher we have used Mathemat- 
ica to perform the calculation numerically, using random values for the free 
parameters. For some dimensions to be discussed below the calculation was 
also performed symbolically. When N is a power of a prime we found no 
breakdown in the consistency conditions to the orders we checked. This had 
to be so because in this case there do exist affine families of Hadamard ma- 
trices with their dimension given by the linear defect d\. For iV = 2 • 3 = 6 
we computed (numerically) the higher order contributions to order 100 in the 
perturbation series, without encountering any breakdown of the consistency 
conditions. There seemed to be no point in going further. The calculation 
clearly supports the extant conjecture that the N = 6 Fourier matrix belongs 
to a smooth 4-parameter family of dephased Hadamard matrices. 

For all other choices of N < 100 we found that the consistency condi- 
tions do break down at some order s, according to a definite pattern. Let 
Pi,P2,P3, ... be different prime numbers. Then the consistency conditions 
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hold to all orders if N is a power of a prime (and to order 100 if N — 6) 



• break at order 11 if N = 10 

• break at order 7 if N = 2pi and p\ > 5 is odd 

• break at order 5 if N = p x p 2 is odd 

• break at order 4 if JV = p k ^p k 2 and k ± k 2 > 1 

• break at order 3 if N = p^p^p^. 

For iV < 100 there are no examples of an integer that is a product of four 
different primes, but we did check that the consistency conditions break at 
order 3 for N = 2 • 3 • 5 • 7 = 210. Again, Appendix C contains a proof that 
the consistency conditions always hold to second order. 
It is very encouraging that an orderly pattern emerges. 

8. The TV = 12 case 

What we really want to know is the dimension of the solution space to all 
orders. We will discuss the case N = 12 in detail. The defect at linear order 
is d\ = 17, and it is also known that the Fourier matrix belongs to seven 
distinct affine families of dimension (1a = 9 [3]. Therefore we know at the 
outset that the dimension of the dephased solution space lies between these 
bounds. 

When the calculation is continued beyond linear order we find that the 
consistency conditions for the linear system break down at fourth order in 
the perturbation, resulting in a set of fourth order polynomials to be solved. 

There are 40 variables in the first order solution. 23 of those are trivial 
(since they determine the 2N — 1 free phases) so we expect the consistency 
conditions to depend on 17 variables. There are only 13 conditions that 
do not vanish automatically, and close inspection shows that only 13 lin- 
ear combinations of the variables enter these equations. To be precise, the 
consistency conditions are fourth order polynomials in the 13 variables 
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~ x 2,3 


x 3b 


= 2xi >3 


— ^0,3 


-^2,3 


x 3c 


= 2X 2 ,3 


- ^0,3 


- x l,3 


x 9a 


= 2x ,9 


- Xi,g 


~ x 2,9 


x 9b 


= 2xi, 9 


~ x 0,9 


~ x 2,9 


x 9c 


= 2x 2 , 9 


~ x 0,9 


~ x l,9 



Note that there are only 13 independent variables, because x 3(l + x 3 b + x 3 

x 9a + x 9b + x 9c = 0. 

We next define the auxiliary polynomials 

Pi = x 3a + x 9a V2 = x 3b + x 9b T>3 = x 3c + x 9c 

2 2 2 2 

PA — x 4a ~ X 4b P5 = X 8a ~ X 8b P6 = x 4a x 8a — x 4b x 8b ■ 

The complete set of consistency conditions now take the form 

PiPe = P2P6 = P3P& = 

(Pi +P2+ P3)Pi = (Pi +P2+ P3)P5 = 
x 4a x w(Pl +P2+ P3) + x 8a{ x 6aPl + x 6bP2 + x 6cP3) = 
x 4b x w(Pl +P2+ Pa) + x 8b( x 6aPl + x 6bP2 + x 6cP3) = 
^8^2 (Pi + P2 + P3) + x 4a( x 6aPl + x 6bP2 + x dcP3) = 
2^2 (Pi + P2 + P3) + x 4b( x 6aPl + x 6bP2 + x 6cP3} = 

3x 3a (xi p 4 + x 2 p 5 ) + 2p 6 (x 3a (2x 6a + x 6c ) + x 3fe (x 6c - x 66 )) = 
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3x 3b (x w p4 + X2P5) + 2p 6 (x 3b (2x 6b + x 6c ) + x 3a (x 6c - xqo)) = (76) 



3x 9a (x w p 4 + x 2 p 5 ) + 2p 6 (x 9a (2x 6a + x 6c ) + x 9b (x 6c - x 6b )) = (77) 



3x 9b (x 10 p 4 + x 2 p 5 ) + Zpe (x 9b (2x 6b + x 6c ) + x 9a (x 6c - x 6a )) = . (78) 

There are three ways of satisfying these equations. 

Solutions of type 1 are obtained if p 4 = p 5 = p 6 = 0. This implies that 

%4a %4b %4a %4b (79) 

X8a = X 8b Xg a = —Xg b 

Two polynomial equations remain, so the dimension drops by 4. Note that 
the four conditions 

x Aa = x Ab = x 8a = x 8b = (80) 

solves the entire system. Call this special case the type I solution. 

Solutions of type 2 are obtained if p\ = p 2 = p 3 = 0. This implies that 

x 3a = ix 9a x 3a = —ix 9a 

x 3b = ix 9b x 3b = —ix 9b 

Two polynomial equations remain, so the dimension again drops by 4. Note 
that the four conditions 

x 3a = x 3b = x 9a = x 9b = (82) 

solves the entire system. Call this special case the type II solution. 
When neither Pi,p 2 ,P3 nor p^p^ are all zero the equations imply 

Pi + P2 + P3 = 

(83) 

P6 = 

XQaPl + X &b p 2 + X 6c p 3 = 

(84) 

X W P4; + X 2 p 5 = 
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Hence the consistency conditions impose 4 independent conditions on our 
variables, meaning that the defect again drops from 17 to 13. Call these 
solutions type 3. 

Solutions of type 2 are obtained by transposition from solutions of type 
1, and similarly for types II and I. Solutions of type 3 on the other hand form 
a self-cognate family (at least when considered as an algebraic variety), since 
transposition interchanges eqs. (83) and eqs. (84). 

Imposing unitarity means that xq^ is purely imaginary, and the remain- 
ing parameters become related by complex conjugation (x ,2 + ^o,io = 0, . . . , 
^0,3 + ^0,9 = 0, . . . , xo,4 + xo,8 = 0, . . . ). One then finds that Pi,P2,P3,Pe 
are real, while p$ = p4. There are 8 polynomial equations remaining. Solv- 
ing them one ends up with the same solutions as one obtains by imposing 
unitarity on the solutions of the complex equations. 

Having solved the consistency conditions that arise at fourth order, we 
must now address the question whether the 13-dimensional solutions found 
at fourth order are truly 13-dimensional, or whether their dimensions drop 
due to consistency conditions appearing in higher orders. To this end we 
continued the calculation numerically to order 11 for the solutions of type I 
and II. No further breakdown of any consistency condition was observed. For 
solutions of type 1 on the other hand a further breakdown of the consistency 
conditions occurs at order 6, which means that the dimension of this family 
of solutions drops below 13. Type 2 must behave similarly. For type 3 there 
is a further breakdown of the consistency conditions already at order 5. Thus 
the conclusion from these calculations is that the solutions of types 1, 2, and 
3 have dimension smaller than 13. They may be entirely spurious. For types 
I and II no such conclusion can be drawn, the calculation simply shows that 
their dimension is at most 13. 

Fortunately we can bound the dimension of the solutions from below as 
well. As noted by Karlsson [17] the Dr£a construction [18] (see Appendix A) 
allows us to construct a 13-dimensional family of = 12 dephased Hadamard 
matrices once a 4-dimensional family of = 6 dephased Hadamard matrices 
is known. Indeed, for any Hadamard matrices Hi and H2 and any diagonal 
unitary matrix D of order N the matrix 



is a Hadamard matrix of order 2A^. If H\ and H2 include the Fourier matrix 




(85) 
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of order N this family includes a matrix which is permutation equivalent to 
the Fourier matrix of order 2N . Hence the existence of such a 4 dimensional 
family for N = 6 implies that there exists at least one 13-dimensional family 
for iV = 12. The only candidates for such a family are the type I and 
II solutions. (Since they are related by transposition the existence of one 
implies the existence of the other.) Therefore it is only the slight uncertainty 
concerning N = 6 that prevents us from stating as a theorem that these 
13-dimensional solutions must exist to all orders. 

This conclusion receives strong support from a different direction. For 
TV = 12 it is known that there exist exactly 7 affine families of dimension 9 [3]. 
The two 13-dimensional solutions of types I and II intersect in a 9-dimensional 
affine family called FyiA [3], and each type contains one representative of 
each of three pairs of affine families related by transposition. For the self- 
cognate family F 12 a the parameters introduced by Tadej and Zyczkowski [3] 
are explicitly given by 

a = x lt2 (u 5 + to 9 ) + Xi^((jj 7 + oo 9 ) + c.c. + 2a! 
b = xi i2 (oo 7 + oo 9 ) + xi i4 (u 9 + u 11 ) + c.c. 
c = 2xi t2 u 9 + c.c. + 2ai 
d = xi i2 (uu 9 + w 11 ) + #1,4 (a; 7 + u 9 ) + c.c. 

e = x h2 (u + lo 9 ) + x 1A (u 9 + u n ) + c.c. + 2a x (86) 
f = 2a 2 

g = xi t2 (u 5 + u 9 ) + x 1A (u 7 + u 9 ) + c.c. + 2a 3 
h = 2a 4 

% = x lt2 (u 5 + u 9 ) + x ia (uj 7 + u 9 ) + c.c. + 2a 5 , 

where = ^ccj is imaginary and c.c. denotes the complex conjugate of the 
preceding terms. We do not give the choices that reproduce the remaining 
affine families here. The picture that emerges is that of Fig. 2. 

We have computed the linear defect d\ for a few randomly chosen mem- 
bers of each affine family. For the self-cognate family we find d\ = 17. We 
observe that 13 + 13 — 9 = 17, which means that the whole tangent space 
(whose dimension is given by the linear defect) of the self-cognate family is 
spanned by the intersecting solutions of type I and II. For the remaining affine 
families we find that d\ = 13 (except at the Fourier matrix itself), which is 
consistent with the fact that these families sit within a 13-dimensional family. 
This provides some evidence that the solutions of types I and II exist also 
far away from the Fourier matrix. 
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Figure 2: The type I and II solutions for N = 12 form two sheets related by 
transposition. The sheets intersect in an affine family, and each sheet contains 
three additional affine families all passing through the Fourier matrix, where the 
two sheets span the linear tangent space. 

9. N = pipl, and other choices of N 

Let us assume that N = where pi and p 2 are prime numbers. We are 
then able to formulate a precise conjecture concerning how the type I and II 
solutions found for N = 12 generalise. Thus we suggest that when N = p\p\ 
there is always two types of solutions, giving rise to families of Hadamard 
matrices related to each other by transposition. The conjectured solutions 
are given by 

Type I : x itj = x i+P2>j if gcd(j, N) = p\ (87) 

Type II : x id = x i+1J if gcd(j, N) = p 1 . (88) 

The evidence for this conjecture is primarily that these conditions solve all 
consistency conditions up to fourth order not only for iV = 12 but for all 
such N < 50 (namely for N = 3 • 2 2 , 5 • 2 2 , 7 • 2 2 , 11 • 2 2 , 2 • 3 2 , 5 • 3 2 , and 2-5 2 ). 
But we can add some additional evidence. 

First of all, although we have continued the calculation to higher orders 
only for the case iV = 12, we note that the existence of a four parameter 



23 



family for N = Q implies the existence of 22-dimensional family for N — 18. 
This is precisely the dimension implied by our conjecture in this case. 

Moreover the overall picture gained in the N = 12 case seems to repeat 
itself. In general, eqs. (87) or (88) impose (pi — l)p 2 (p2 — 1) conditions on 
the first order solution. If the conjecture is true it implies that the type I 
and II solutions have dimension 

<,= *- w ( 1 -^)( 1 -s)- (89) 

where d\ is the linear defect of the Fourier matrix. Using the expression for 
di that we quote in eq. (95), the dimension d can alternatively be expressed 
as 

d = < fc + JV (l-l)(l-i), (90) 

where dA is the dimension of the largest afline family obtainable from the 
Di^a construction in these dimensions. See eq. (99) in Appendix A for this. 
It follows that 

d= <h + dA ^ d 1 = 2d-d A . (91) 

The conjectured dimension d is just right for the two solutions to intersect 
in a self-cognate affine family of dimension d A , in such a way that they span 
the linear tangent space at their intersection. 

For N = 12 we know all affine families of maximal dimension stemming 
from the Fourier matrix [3]. This is not so in higher dimensions, but using 
the Dit^a construction we obtained one self-cognate family and two pairs of 
affine families related by transposition, all of dimension d A , for all N = p\p\. 
The details are in Appendix A. For our seven examples with iV = p\p\ < 50 
we checked that the self-cognate family sits in the intersection of the two 
solutions of type I and II, while the other afline families are contained in 
a single such solution. We also computed the defect along all these affine 
families for some randomly chosen matrices, and found that their linear defect 
equals 2d—d A for the self-cognate family, and it equals d for the other families 
(except at the Fourier matrix itself). This clearly supports the conjecture 
that the solutions of type I and II survive to higher orders. 
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Finally, a word about the equations that we actually encounter. As in the 
case of N = 12 we know that the fourth order consistency conditions admit 
other solutions besides the ones that we denote types I and II. For N = 20 
we found the general solution at fourth order. In this case the equations 
depend on the variables only through combinations similar to those given in 
eqs. (66), on 

^0,5 - Xl,5 ~ ^3,5 + 2^4,5 , 4x ,5 ~ ^1,5 - ^2,5 - ^3,5 ~ ^4,5 , (92) 

and on cyclic permutations of these. Besides the two 25 dimensional solutions 
of types I and II there exists a 29-dimensional solution which is self-cognate 
(as an algebraic variety). However, it may well be that such additional 
solutions are subject to further restrictions at higher orders, as is indeed 
the case for iV = 12. They may be entirely spurious. 

About dimensions N not of the form pip^ ( or P k ) we have little to say. 
We have found some hints that eq. (90) may give the dimension of a family 
of Hadamard matrices in somewhat greater generality, notably if N = p\p\ 
and k > 1. The case N = p±p2 works in a different way however. 

10. Conclusions and speculations 

We have investigated the dimension of any smooth set of N x N complex 
Hadamard matrices including the Fourier matrix, and we state our results 
for the set of dephased Hadamard matrices. If ./V is a prime number this set 
consists of a single matrix, namely the Fourier matrix itself. If A is a power 
of a prime number the dimension of the set is known from previous work, 
because there are explicit constructions of affine families that saturate the 
bound given by the first order calculation [3] ; see Appendix B for an explicit 
construction. For N = 6 our calculations support, to 100th order in perturba- 
tion theory, the conjecture that the dimension equals 4. If this is so, it follows 
that the dimension for N = 12 is at least 13. Our calculations — carried to 
11th order in perturbation theory — support this number, and indeed they 
prove that the dimension cannot exceed 13 due to consistency conditions 
that appear at order 4. Moreover an appealing structure emerged, in which 
the known affine families find a natural place. First order calculations along 
these families provide evidence that the 13-dimensional families remain 13- 
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dimensional also far away from the Fourier matrix. 

For all non-prime power values of N with the single exception of N = 6, 
we found that non-trivial consistency conditions arise in the calculation. Our 
conclusion is that the consistency conditions on the first order solution are 
identically satisfied if N = 6 or if N is a prime power, that non-trivial 
consistency conditions appear at order 11 if N — 10, at order 7 if N is 
twice an odd prime with N > 10, at order 5 if N is a product of two odd 
primes, at order 4 if N is a product of two primes with at least one prime 
factor repeated, and at order 3 if N contains three different prime factors. 
Our evidence for this statement was described in section 7. Based on it we 
confidently suggest that a systematic understanding of these calculations is 
possible for arbitrary N, even though this is out of our reach at the moment. 

It is interesting to observe that 6, and to some extent 10, dimensions stand 
out as being very special. The conjecture that complete sets of Mutually 
Unbiased Bases do not exist in any non-prime power dimension rests on 
numerical searches for N = 6; see ref. [19] and references therein. 

When the consistency conditions break down we know that the dimension 
of the solution space is less than that suggested by the linear defect. However, 
in order to see by how much the dimension drops it is necessary to solve these 
conditions — which are multivariate polynomial equations. We were able to 
deal with this problem for altogether seven examples where N is of the form 
Pipl- Based on the results described in sections 8 and 9 we were then able to 
conjecture the form of a solution for all N = The conjectured solution 
consists of two families of dimension 

d _l±A± =3N _ 3pip2 _ 2p l +P2 + i ) (93) 

where d\ is the linear defect and d^ the maximal dimension of known afline 
families. These two families are related by transposition and intersect in a 
self-cognate affine family of dimension dA, as illustrated in Fig. 2. There are 
other afline families contained within a single branch of the solution. 

We are not sure whether other solutions exist, or not. Indeed this is as far 
as we have been able to go. We have no hints for what a completely general 
formula for the dimension of the set of Hadamard matrices containing the 
Fourier matrix will look like. Nevertheless the evidence strongly suggests 
that one can be found. We find it interesting that the shape of quantum 
state space depends on the number theoretical properties of the dimension 
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in such an intricate way. 
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Appendix A: Background information 

Equivalences: In the classification of complex Hadamard matrices two ma- 
trices Hi,H 2 are regarded as equivalent, written Hi « H 2 , if there exist 
diagonal matrices D L , D R and permutation matrices Pl, Pr such that 

H 2 = D L P L H X P R D R . (94) 

This is a natural equivalence relation in many applications [2] . If the Hadamard 
matrices are given in dephased form only discrete equivalences remain. In 
practice it is hard to take all of them into account. 

For composite N = NiN 2 one finds that F N rs F Nl <8> F N2 if and only if 
Ni and N 2 are relatively prime. Since F N is the character table of the cyclic 
group Zn this follows from a well known fact about cyclic groups. 

The linear defect: Here we just want to mention that the formula for the 
linear defect, eq. (5), can be rewritten in the form 

di= (l + Jfei-^) (l + k 2 -^j (i + kn -^jN-2N + l, (95) 

where it was assumed that the prime number decomposition of A is A = 
Pi 1 -?" 2 pj*[3]. 

Affine families: A family of Hadamard matrices stemming from a Hadamard 
matrix H is said to be affine [3] if it can be written on the form 

H(a, b, ...) = H o EXP(iR) , (96) 
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where the product is the entry wise Hadamard product, the exponentiation 
is entrywise too, and R belongs to a subspace of the set of all real N x N 
matrices. The parameters a,b, . . . parametrise that linear subspace. The 
family is given in dephased form if R has only zeroes in the first row and 
column. The affine family itself has the topology of a multi-dimensional real 
torus. 

An example for N = 6 is [2] 
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(97) 



Here a and b are phases that can be chosen freely. The corresponding matrix 
X is given to first order in eq. (42). Taking the transpose of the matrices 
in F(a, b) yields another affine family intersecting the first in the Fourier 
matrix. 



The Di$a construction: There exists a construction due to Di^a [18] allow- 
ing us to construct an affine family in dimension iV = iViiV^ starting from 
one Hadamard matrix in dimension Ni and N± — 1 possibly different 
Hadamard matrices H^ l \ . . . , H^ Nl ^ in dimension iVV In dephased form 



V<-^ (1) H§Ui D VHV ... HSl^D^-VHW ) 

(98) 

where . . . , D^ Nl ^ are diagonal unitary matrices (with their first entries 
equal to one in order to obtain H in dephased form). 

Now let iV = ■ p^ 2 Pn n be the prime number decomposition of N. 

Using the Fourier matrices F pi , . . . , F Pn as seeds in the Di^a construction it 
is easy to show that we obtain an affine family of dimension 

N N 

d A = (k 1 + --- + k n -l)N-k 1 k n — + 1. (99) 

Pi Vn 
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But does it contain the Fourier matrix Fn? 

An affine family obtained from the Di^a construction in dimension N = 
NiN 2 necessarily contains the matrix F Nl ®F N2 . But it also contains a matrix 
equivalent to F N . To see this, let 

< r, s < JVi , < m, n < N 2 , (100) 

to = , qi = u N2 , q 2 = oo Nl , (101) 
and introduce N± — 1 diagonal unitaries 

D« = diag(l,xS r) ,...,xg_ 1 ) . (102) 

The Dit^a construction gives rise to a Hadamard matrix H with matrix ele- 
ments 

H r N 2 +m,sN 2 +n = ~7^ X m QYqT"' ■ (103) 

v -/v 

We now perform a column permutation and obtain an equivalent Hadamard 
matrix H' with matrix elements 

The Fourier matrix has the elements 

1 = J_ u (rN 2+ m){nN 1+S ) = nw^mn ? ( 10 5) 



'N VN VN 

and is obtained from H' by setting 

= . (106) 

In prime power dimensions the affine family interpolates between the non- 
equivalent matrices F N and F p <g> • • • <g> F p . 

For N = p k the dimension cLa equals the linear defect d\ of the Fourier 
matrix, so affine families of larger dimensions cannot contain it. We believe 
that this is so for all N; it is known to be so for N < 18 [3, 20]. Affine 
families not including the Fourier matrix, and not obtainable from the Dita 
construction, are known [21]. 
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Self-cognate affine families: By definition [3] a self-cognate family of Hadamard 
matrices goes into itself under transposition. In the main text we use the fact 
that self-cognate affine families of dimension oIa exist whenever N = p\p\. 
To prove this let 

< r, s < pi , < m,n,u,v < P2 ■ (107) 

We assume that the Dita construction has already been applied to construct 
a pip 2 x pip 2 Hadamard matrix, as in eq. (104). In the next step we use p 2 
matrices of this type, where the diagonal unitaries used in the first step are 
allowed to differ from each other. Thus there are (pi — l)p2 diagonal unitaries 
£){s,v) f rom the first step, and an additional p 2 — 1 diagonal unitaries 

^^diaga,^,...,^.,) . (108) 
The Di^a construction now gives a Hadamard matrix with matrix elements 

tt _ 1 rs mn+uv (s,v) M (-1 rvq\ 

- L1 piP2U+rp2+m,pip2V+npi+s nrp^l ^2 yrp2+m • \ ±KJU J 

V TV 



We next perform a column permutation according to 

ttI _ 1 rs mn+uv (s,v) (v) (]](]) 

PiP2U+rp2+m,pip2n+sp2+v \fj^ t>rp2+m l 11 "^ 



so that transposition of H' is given by 

u ■<->■ n , r ■<->■ s , m ■<->■ v , (HI) 



x 



0^) 7 >) ^ T (r,rn) (m) fiio^ 
yrp2+m ^ x t) ysp2+v ■ l- LXZ 'y' 



Hence this is a self-cognate family, as was to be shown. 

Other affine families: One obtains affine families that do not go into them- 
selves under transposition if one performs the Dita construction in a different 
order. The self-cognate family was obtained by starting with a matrix of size 
P2, enlarging it to size P1P2, and finally to size P2P\P2- Other examples re- 
ferred to in section 9 are obtained from the sequences p 2 — > p\ — > P\p\ and 
Pi P2P1 P2P11 an d they lead to affine families of the same dimension. 
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The case N = 6: A number of non-affme families of 6 x 6 Hadamard matri- 
ces have been found [22, 23, 24, 17], and all analytically known families are 
included as subfamilies of the 3-dimensional non-affine family found by Karls- 
son [13]. As mentioned in the introduction it is known that a 4-dimensional 
family exists [5], but a proof that this family includes the Fourier matrix is 
missing. It is also known that at least one isolated Hadamard matrix, not 
belonging to this family, exists [25, 26]. 

Families not including F^: Finally, to avoid any misunderstanding, we ob- 
serve that although the defect vanishes for N = 7 (say), this does not mean 
that the Fourier matrix is the only known Hadamard matrix in this case. 
Indeed a one-dimensional family not including the Fourier matrix is known 
for N = 7, and for some other cases where N is a prime equal to 1 modulo 
6 [27]. We have nothing to say about such families. 

Appendix B: The prime power case 

When A is a power of a prime the Di^a construction allows us to construct 
an affine family of maximal dimension equal to the linear defect d\. A more 
direct construction is the following. The matrix elements of R, in eq. (96), 
are given in terms of independent parameters 4> n ,i,j as 

if i Kp™- 1 . (113) 
and n = k from the sum, 



k-i 

Rij = ^2 mod P n >i mod P k ~ n ' = if i < P 71 " 1 or j = . (114) 

n=l 

The modular arithmetic means that R splits into p x p equal blocks of size 
p k ~ 1 . Since (f> n repeats for i > p n , while n +i = for i > p n , these parameters 
are independent, and their total number is 



^ ^ 0n,i mod p n ,j mod p k ~ n , $n,i,j 



n=0 



Dephased matrices are obtained by excluding n 
and setting 4>nio — 0, that is 
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k-l 



J2(P n -p n ~ l ){p k ~ n — \) — {k — l)p k - hp*- 1 + 1 = di . (115) 

n=l 

The proof that the resulting matrices are unitary Hadamard matrices is not 
entirely straightforward, but we omit it here. 

The connection to the parametrisation we use in the main body of the 
paper is easily found for the special case N = p 2 , where 

1 

%i mod p,rp mod N ^ ^ ^ P c'^ 1 '* mod p ' k mod v • (116) 

^ k=0 

From this we learn that the choice of free parameters that we make in the 
perturbative construction may not be the optimal one for a closed form ex- 
pression. 



Appendix C: The consistency conditions hold to second order 

We mention in the text that the consistency conditions (44) always hold to 
second order. We give the key steps in the proof here since they serve to 
illustrate the complexities involved in making a calculation valid for all N. 
In particular we need to make a liberal use of linear congruence relations. 
Setting s = 2 in eq. (30) and replacing X* 1 ) by its solution (40) we obtain 



n(2,n) = 
i,i 

(117) 

N-l 



E H 



) _ 2.(1) 

(i+n) mod gcd(fc— n,N),k— n i mod gcd(fc— n,N),k— n 



i mod gcd(fc,A r ),— k 



k=0 



At second order therefore the consistency conditions (44) are 
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X 



gcd(n,JV) 1 jV-1 

= ^2 X (i+q gcd(n,AT)) mod gcd(fe,AT),-fe X 

g=0 fc=0 

(118) 

gcd(n,iV)+n) mod gcd(fc— n,N),k— n (i+q gcd(ra,iV)) mod gcd(fc— n,N),k— n 



The crucial step is to realise that the first factor is the same for two values 
of q whenever their difference Aq obeys 

Aq gcd(n, N) = mod gcd(£;, N) . (119) 

This will permit us to break the sum over q into two, one of which involves 
only the second factor. 

The smallest solution for Aq is 



_ lcm (gcd(n, iV"), gcd(fc, N)) _ gcd (lcm(n, k), N) 
q ~ gcd(n,N) ~ gcd(n,N) ' 1 J 

where lcm denotes the largest common multiple. Write q = qi + Aq q 2 . The 
consistency condition then takes the form 



gcd(lcm(ra,fc),iV)) -. 

gcd(n,JV) 1 N-l 



x' l > ., X 



«= E E (i+qi gcd(ra,jV)) mod gcd(fc,A r ),— k 

q 1= k=0 

(121) 

£L i 

gcd(lcm(n,fc),iV) 

x V to (1) 

/ y L (i+qi gcd(n,N)+q 2 gcd(\cm(n,k),N+n) mod gcd(k-n,N),k-n 

92=0 

(i+gi gcd(n,7V)+g2 gcd(lcm(n,fc),iV)) mod gcd(fc— n,N),k— nJ ' 

The dependence on q 2 is now isolated to the sum that constitutes the second 
factor, and it is enough to show that this sum vanishes. It will, if for each q 2 
we can find a q 2 + Aq 2 such that 
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Ag2 gcd(lcm(n, k), N) = n mod gcd (A; — n, N) . (122) 

We know that the equation xa = y mod b has a solution if and only if 
gcd(a, b) divides y. So we must show that n is divisible by 

gcd (gcd(lcm(n, k), N), gcd(/c — n, N)) = gcd (lcm(n, k), k — n, N)) . (123) 

It is enough to show that n is divisible by gcd (lcm(n, k),k — n). But this is 
so because 

gcd (lcm(n, k),k — n) = 1cm (gcd(n, k — n), gcd(/c, k — n)) = gcd(n, k) 

(124) 

which certainly divides n. This ends the proof. 
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